We are seeking a hands-on DevSecOps Engineer – Cloud & AI Security to implement security measures across our application and cloud infrastructure.

About the Company

Quantanite is a customer experience (CX) and digital outsourcing solutions company that helps fast-growing businesses and global brands rethink their operations. By leveraging intelligent automation, GenAI, and outstanding people, we deliver significant transformations and seamless service delivery across every interaction. Our enthusiastic global teams are dedicated to innovation, agility, and achieving purpose-driven results.

Role Overview

As a DevSecOps Engineer focusing on Cloud & AI Security, you will play a crucial role in guaranteeing the security of our applications and cloud infrastructure. This is a hands-on, engineering-centric position requiring proficiency in application-layer security, Azure cloud hardening, and AI security protocols. The successful candidate will be responsible for embedding security into our development lifecycle and deployment processes, ensuring robust defenses for our AI-powered applications and infrastructure.

Key Responsibilities

• Application & Software Security: Embed security controls throughout the software development lifecycle, implement SAST, DAST, and SCA tooling, and define secure coding standards.
• AI Security Controls: Design security measures for AI systems, including model access controls and data security for AI pipelines.
• Azure Cloud Infrastructure Security: Secure the Azure landing zone, manage Azure Security Centre, and implement Azure key management practices.
• DevSecOps Pipeline & Automation: Create security gates in CI/CD pipelines and automate security compliance checks.
• Governance, Compliance & Collaboration: Conduct vulnerability assessments, provide technical security inputs for audits, and act as a security advisor for engineering teams.

Required Skills & Qualifications

Education & Experience

• Bachelor's degree in Computer Science, Information Security, Software Engineering, or a related field.
• 5–8 years of experience in a DevSecOps, Cloud Security, or Application Security engineering role.
• Demonstrable hands-on experience across both application security and cloud infrastructure security.
• Prior experience in a security role supporting AI/ML or data-intensive platforms is an advantage.

Application & AI Security

• Proficiency with SAST/DAST/SCA tools: Snyk, Checkmarx, OWASP ZAP, or equivalent.
• Strong understanding of OWASP Top 10 and API Security Top 10.
• Hands-on experience with secrets management tools: Azure Key Vault or similar.
• Experience securing APIs (OAuth 2.0, API keys, mTLS, etc.).
• Understanding of AI/ML security risks and practical mitigation approaches.

Azure Cloud Security

• Hands-on expertise with Azure security services like Microsoft Defender for Cloud, Azure Key Vault.
• Strong working knowledge of Azure networking security.
• Experience hardening Azure PaaS services and AKS workloads.

DevSecOps & Infrastructure

• Experience building security into CI/CD pipelines using Azure DevOps or GitHub Actions.
• Proficiency with Infrastructure as Code tools: Terraform, Bicep.
• Scripting skills in Python, PowerShell, or Bash.

Benefits

• Dress Code: Wear anything you like to the office.
• Employee Engagement: Join our family community and celebrate achievements together.
• Professional Development: Opportunities for growth and travel.
• Events: Regular team and organization-wide events.
• Value Orientation: We are driven by our Purpose and Values, committed to building better together.